CVE-2023-40424

EPSS 0.3%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

26 sep 2023Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to access user-sensitive data.

Productos afectados

Apple · iOS and iPadOS Apple · macOS Apple · watchOS

Referencias

http://seclists.org/fulldisclosure/2023/Oct/3 http://seclists.org/fulldisclosure/2023/Oct/8 http://seclists.org/fulldisclosure/2023/Oct/9 https://support.apple.com/en-us/HT213937 https://support.apple.com/en-us/HT213938 https://support.apple.com/en-us/HT213940 https://support.apple.com/kb/HT213937 https://support.apple.com/kb/HT213938 https://support.apple.com/kb/HT213940